Skip to content
.github/workflows/scorecard.yml

Scorecards supply-chain security #304

Sign in to view logs

Scorecards supply-chain security

Scorecards supply-chain security #304

Workflow file for this run

.github/workflows/scorecard.yml at 11127a7
# SPDX-License-Identifier: MPL-2.0
name: Scorecards supply-chain security
on:
branch_protection_rule:
schedule:
- cron: '23 4 * * 1'
permissions:
actions: read
contents: read
jobs:
analysis:
# Explicit least-privilege permissions for the OSSF Scorecard reusable
# workflow (the documented set), instead of relying on a broad
# workflow-level `read-all`:
permissions:
contents: read # read the repository
actions: read # inspect workflow runs (Token-Permissions, etc.)
security-events: write # upload results to the code-scanning dashboard
id-token: write # OIDC, to publish results / badge
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329

Check failure on line 23 in .github/workflows/scorecard.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/scorecard.yml

Invalid workflow file 

error parsing called workflow
".github/workflows/scorecard.yml"
-> "hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@7fdc2705df74b4e352d2a1cde3e87a5923fdf329"
: workflow was not found. See https://docs.github.com/actions/learn-github-actions/reusing-workflows#access-to-reusable-workflows for more information.
secrets: inherit